Privacy notice
1. Controller
Redur Ammo, sole trader trading as “Trade by Evidence”, Linzer Straße 397-399/2/12, 1140 Wien, Österreich, email [email protected]. We have not appointed a data protection officer; one is not required for our activities (Article 37 GDPR).
2. Website delivery (Cloudflare)
This website is hosted on Cloudflare Pages (Cloudflare, Inc., USA). When you visit, technically necessary connection data are processed: IP address, requested URL, time, browser/device information and security data. Purpose: delivering the site securely and preventing abuse. Legal basis: Article 6(1)(f) GDPR (our legitimate interest in a secure, reachable website). Cloudflare processes these data as our processor under its Data Processing Addendum, which is part of its customer terms; transfers to the USA rely on the EU–US Data Privacy Framework and/or standard contractual clauses. We do not use advertising cookies or remotely loaded fonts.
3. Cloudflare Web Analytics
We count aggregate page views and basic performance metrics with Cloudflare Web Analytics. According to Cloudflare, it uses no cookies or browser storage and does not log query strings. Legal basis: Article 6(1)(f) GDPR (measuring reach in a privacy-friendly way). We do not link visit statistics to email addresses or orders.
4. Email contact
If you email [email protected], we process your address, message and the information you send to handle your request. Legal basis: Article 6(1)(b) GDPR for pre-contractual or contractual requests, otherwise Article 6(1)(f). Incoming mail is forwarded through Cloudflare Email Routing to a Google mailbox used by us. We delete resolved general enquiries 12 months after they are closed, unless a legal retention duty applies.
5. Launch waitlist (Kit)
If you join the waitlist, Kit (Kit Inc., USA) processes your email address and the proof of your double opt-in to send a few launch emails (max. 3). Kit measures opens and clicks in its emails. Legal basis: your consent, Article 6(1)(a) GDPR and § 174 TKG 2021. You can withdraw consent at any time via the unsubscribe link or by email. Kit acts as our processor under its Data Processing Addendum including standard contractual clauses. We delete your entry after the last launch email or when you unsubscribe.
6. Purchase (Stripe Managed Payments / Link)
When you buy the Checker, you pay on a checkout page operated by Stripe. Under Stripe Managed Payments, Sold through Link, LLC (“Link”, a Stripe company, USA) handles payment, fraud checks, receipts and VAT as merchant of record and as an independent controller under its own privacy policy (link.com/privacy). We receive from Stripe: your name, email address, country, the amount, currency and order status – no full card details. Before you go to checkout, we store an order reference together with whether you ticked the optional box on immediate supply, the text version shown and the time. Legal basis: Article 6(1)(b) GDPR (contract) and Article 6(1)(c) GDPR (accounting and consumer-law evidence duties). Order and consent records are stored in a Cloudflare D1 database (Cloudflare as our processor, see section 2). We keep order records for 7 years (§ 132 BAO) and then delete them.
7. Contract confirmation, download link and withdrawal
We send your contract confirmation, download link and – if you use the withdrawal function – the acknowledgement of receipt by email via Resend (Plus Five Five, Inc., USA; sending region EU – Ireland, eu-west-1; Data Processing Addendum with EU standard contractual clauses), acting as our processor. We store when the confirmation was sent, when the download was used and the content, date and time of any withdrawal declaration. These emails contain no open or click tracking. Legal basis: Article 6(1)(b) and (c) GDPR (§§ 7, 13a, 18 FAGG). Retention: 7 years together with the order records.
8. Checker and export pre-check
The Checker and the free export pre-check process your trade files only locally in your browser. Files are not uploaded and we receive no trading data.
9. Social media profiles
We run profiles on TikTok, X and Reddit. The platforms process data of visitors under their own responsibility and privacy policies. Where we receive page statistics, joint responsibility under Article 26 GDPR may apply; you can exercise your rights with us or with the platform.
10. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and you can withdraw consent at any time with effect for the future. Contact: [email protected]. You can complain to the Austrian Data Protection Authority (dsb.gv.at) or another EU supervisory authority. We do not use automated decision-making or profiling.